Senate Investigates Cisco Over Zero-Day Firewall Vulnerabilities
On Tue, Oct 10, 2025, U.S. Senator Bill Cassidy, Chairman of the Senate Health, Education, Labor, and Pensions (HELP) Committee, addressed a letter to Cisco Systems' CEO Chuck Robbins regarding recent zero-day vulnerabilities impacting Cisco's networking…
On Tue, Oct 10, 2025, U.S. Senator Bill Cassidy, Chairman of the Senate Health, Education, Labor, and Pensions (HELP) Committee, addressed a letter to Cisco Systems' CEO Chuck Robbins regarding recent zero-day vulnerabilities impacting Cisco's networking equipment. The vulnerabilities pose potential risks to national security and the economy, as highlighted by an emergency directive from the Cybersecurity and Infrastructure Security Agency (CISA).
The vulnerabilities, identified as CVE-2025-20333 and CVE-2025-20362 , affect Cisco's Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) devices. These flaws allow unauthenticated remote code execution and privilege escalation. Exploitation by the ArcaneDoor threat actor, active since early 2024, enables attackers to install persistent malware by manipulating read-only memory (ROM).
CISA issued Emergency Directive 25-03 on Sep 25, 2025, requiring federal agencies to inventory affected devices, perform forensic analysis, and apply patches within 24 hours or disconnect end-of-life hardware.
Reports indicate a breach at a federal agency, prompting urgent containment and submissions to CISA's malware portal by Sep 26. Cassidy's letter underscores Cisco's critical role as a major network infrastructure provider, serving federal entities and businesses reliant on its services for healthcare and education.
These flaws allow unauthenticated remote code execution and privilege escalation.
The senator seeks information on Cisco's measures to identify threats to private customers and its dissemination of patches or advisories. Further inquiries address communication strategies for upgrading outdated devices and support for agencies such as Health and Human Services, Education, and Labor.
Cisco has acknowledged exploitation dating back to May 2025 and is collaborating with federal responders. The focus is on broader protections for non-federal users, including small businesses, schools, and healthcare providers, which face increased risks due to the widespread use of these devices in securing remote access and VPNs.
Senator Cassidy has requested a response by Fri, Oct 27, 2025, to support ongoing HELP Committee investigations into cyber defenses. Experts recommend that all organizations review Cisco advisories and promptly implement mitigations to prevent similar incidents.
Based on reporting by Cyber Security News.